$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: z5ZF7r8fYB0d2rWG1XtrWyrn7sXZ3oMhBR0QIWfrknU= Subject key identifier: B7:73:12:39:DD:5D:9D:EB:F9:06:A7:29:4C:A3:ED:8F:1D:EE:61:D2 Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 04E2 Signing time: Tue 24 Mar 2026 23:28:01 +0000 Manifest this update: Tue 24 Mar 2026 23:28:01 +0000 Manifest next update: Tue 31 Mar 2026 23:28:01 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: O+SndF2fGd7nDLOeF8h5oqfvfE0yob9ydtikKOJvPBw=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: YKqRJL9ljgygdcaUGLe6r1ingnSmlcq6qZGLFsctOuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B, serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Validity Not Before: Mar 24 23:28:01 2026 GMT Not After : Mar 31 23:28:01 2026 GMT Subject: CN=69c31e01-ca31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:e8:6f:32:4e:06:68:93:50:ad:9b:a9:b7: cc:5f:78:0b:15:e6:fb:30:f1:f9:6e:53:2f:3b:d3: a9:b2:dd:a1:48:41:8c:64:6f:89:03:c7:91:ab:f4: e8:49:8c:9e:49:d0:1b:55:06:b3:c0:40:4a:08:29: cc:8b:4c:d1:86:99:23:24:8e:40:bf:92:05:45:29: 30:a9:71:81:c8:4b:6e:e7:b0:aa:75:3e:5d:a4:23: e5:1a:5e:12:8c:ef:35:2c:ac:0f:d9:ba:99:e6:a3: a9:25:01:66:b5:db:0c:c8:ba:32:44:f5:26:a2:85: 0c:35:9f:5a:ba:df:1f:c7:88:61:9d:cd:74:b4:8c: 3f:33:2f:60:e7:7a:32:c6:76:45:a7:f9:c3:7d:28: 80:61:b9:46:04:87:d3:e3:4a:21:e7:c0:d4:b3:b4: 6a:d7:81:16:a7:5d:44:66:08:bf:b4:4f:5d:57:35: 5b:bf:7a:77:fe:93:6d:a7:54:cc:b8:37:3d:82:25: ca:47:13:70:43:1c:a9:60:19:66:a1:16:7c:5c:62: 7c:f5:dd:08:2e:c3:6c:a3:c1:0d:a5:67:5e:33:ec: ff:d0:8d:5f:5e:05:a0:ea:51:aa:12:c9:45:b3:db: c3:b2:f4:c4:e4:ba:7a:4b:20:a2:7b:da:82:22:df: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:73:12:39:DD:5D:9D:EB:F9:06:A7:29:4C:A3:ED:8F:1D:EE:61:D2 X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:40:70:2e:e0:72:76:4c:a8:fb:e8:e8:91:ad:54:b1:4e:ff: 7e:59:d4:e0:d4:cc:5a:00:20:e8:8d:34:08:56:73:ce:53:50: 57:69:b2:f5:e6:20:f8:fb:ce:d6:39:b1:b5:35:6c:19:32:71: a8:8b:87:a6:62:74:37:ea:3a:fa:51:12:bf:09:9a:f0:7d:eb: ae:04:60:de:6e:9c:27:e4:65:f2:4a:ce:5a:94:59:7e:d7:9a: 76:92:ef:f0:15:ef:34:9c:7e:a6:43:05:6d:08:ad:a9:01:ff: d0:dc:0e:6c:f6:23:75:a5:24:04:9a:1b:9a:1b:ea:b0:f6:27: 2a:2c:ba:3c:ee:df:f6:e3:43:bf:1b:c7:64:90:6c:90:37:bf: 76:66:99:a7:e0:46:94:a4:4a:03:72:63:76:db:59:6a:0f:91: 31:be:98:a6:f7:42:b4:98:85:75:74:9e:11:5e:e7:d0:47:41: b7:03:aa:2c:15:03:0f:54:2f:69:88:e8:f5:d6:7a:3f:37:3c: 18:b2:de:07:a4:e2:29:e3:e8:03:30:d8:1a:12:91:c3:bb:9a: f4:2e:ba:6f:43:8f:d7:b3:0a:87:12:77:db:c1:3e:53:5b:f4: a6:93:9d:e4:17:79:d9:1c:15:31:58:d8:dd:69:6a:9a:94:b9: b5:69:e5:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjYwMzI0MjMyODAxWhcNMjYwMzMxMjMyODAxWjAYMRYwFAYD VQQDEw02OWMzMWUwMS1jYTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukfobzJOBmiTUK2bqbfMX3gLFeb7MPH5blMvO9Opst2hSEGMZG+JA8eRq/To SYyeSdAbVQazwEBKCCnMi0zRhpkjJI5Av5IFRSkwqXGByEtu57CqdT5dpCPlGl4S jO81LKwP2bqZ5qOpJQFmtdsMyLoyRPUmooUMNZ9aut8fx4hhnc10tIw/My9g53oy xnZFp/nDfSiAYblGBIfT40oh58DUs7Rq14EWp11EZgi/tE9dVzVbv3p3/pNtp1TM uDc9giXKRxNwQxypYBlmoRZ8XGJ89d0ILsNso8ENpWdeM+z/0I1fXgWg6lGqEslF s9vDsvTE5Lp6SyCie9qCIt+LbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdzEjnd XZ3r+QanKUyj7Y8d7mHSMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA6kBwLuBydkyo++joka1UsU7/flnU4NTMWgAg6I00CFZzzlNQV2my9eYg+PvO 1jmxtTVsGTJxqIuHpmJ0N+o6+lESvwma8H3rrgRg3m6cJ+Rl8krOWpRZfteadpLv 8BXvNJx+pkMFbQitqQH/0NwObPYjdaUkBJobmhvqsPYnKiy6PO7f9uNDvxvHZJBs kDe/dmaZp+BGlKRKA3JjdttZag+RMb6YpvdCtJiFdXSeEV7n0EdBtwOqLBUDD1Qv aYjo9dZ6Pzc8GLLeB6TiKePoAzDYGhKRw7ua9C66b0OP17MKhxJ328E+U1v0ppOd 5Bd52RwVMVjY3WlqmpS5tWnltg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:45:00 2026 by rpki-client